CVE-2022-34747

🗓️ 06 Sep 2022 01:20:10Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 103 Views

Format string vulnerability in Zyxel NAS326 firmware allows unauthorized remote code execution via crafted UDP packe

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-34747	6 Sep 202202:15	–	attackerkb
BDU FSTEC	The vulnerability of NAS storage systems (Network Attached Storage) such as NAS326, NAS540, and NAS542 lies in the use of uncontrolled format strings, which allow attackers to execute arbitrary code.	7 Sep 202200:00	–	bdu_fstec
Circl	CVE-2022-34747	7 Sep 202208:13	–	circl
CNNVD	Zyxel NAS326 格式化字符串错误漏洞	6 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-34747	6 Sep 202201:20	–	cvelist
EUVD	EUVD-2022-37696	3 Oct 202520:07	–	euvd
NVD	CVE-2022-34747	6 Sep 202202:15	–	nvd
OSV	CVE-2022-34747	6 Sep 202202:15	–	osv
Prion	Format string	6 Sep 202202:15	–	prion
Positive Technologies	PT-2022-4660 · Zyxel · Zyxel Nas326 +2	5 Sep 202200:00	–	ptsecurity

NVD

Node

zyxel nas326_firmwareRange<5.21(aazf.12)c0

AND

zyxel nas326Match-

[
  {
    "product": "Zyxel NAS326 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "< V5.21(AAZF.12)C0"
      }
    ]
  }
]